The Microsoft Visual Studio 2019 runtime installed on the remote macOS or Mac OS X host is missing a security update. It is, therefore, affected by multiple vulnerabilities including the following:

  - A denial of service (DoS) vulnerability exists in Microsoft Visual Studio 2019. An unauthenticated,     remote attacker can exploit this issue to cause the application to stop responding. (CVE-2021-26423)

  - An information disclosure vulnerability exists in Microsoft Visual Studio 2019. An authenticated,     local attacker can exploit this to disclose potentially sensitive information. (CVE-2021-34532)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2021:0062 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2021-26423:
    .NET Core and Visual Studio Denial of Service Vulnerability

    CVE-2021-34485:
    .NET Core and Visual Studio Information Disclosure Vulnerability

    CVE-2021-34532:
    ASP.NET Core and Visual Studio Information Disclosure Vulnerability

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3148 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address security vulnerabilities are now available. The updated versions are     .NET SDK 5.0.206 and .NET Runtime 5.0.9.

    Security Fix(es):

    * dotnet: ASP.NET Core WebSocket frame processing DoS (CVE-2021-26423)

    * dotnet: Dump file created world-readable (CVE-2021-34485)

    * dotnet: ASP.NET Core JWT token logging (CVE-2021-34532)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-3142 advisory.

    [3.1.118-1.0.1]
    - Update patch to support 8.3 (alexander.burmashev@oracle.com)
    - support OL release scheme (alexander.burmashev@oracle.com)

    [3.1.118-1]
    - Update to .NET SDK 3.1.118 and Runtime 3.1.18
    - Resolves: RHBZ#1990189

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:3142 advisory.

  - dotnet: ASP.NET Core WebSocket frame processing DoS (CVE-2021-26423)

  - dotnet: Dump file created world-readable (CVE-2021-34485)

  - dotnet: ASP.NET Core JWT token logging (CVE-2021-34532)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3143 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address security vulnerabilities are now available. The updated versions are     .NET SDK 3.1.118 and .NET Runtime 3.1.18.

    Security Fix(es):

    * dotnet: ASP.NET Core WebSocket frame processing DoS (CVE-2021-26423)

    * dotnet: Dump file created world-readable (CVE-2021-34485)

    * dotnet: ASP.NET Core JWT token logging (CVE-2021-34532)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

遠端主機上安裝的 Microsoft .NET Core 為 2.1.29 之前的 2.1.x 版、3.1.18 之前的 3.1.x 版或 5.0.9 之前的 5.x 版。因此，此主機會受到一個拒絕服務 (DoS) 弱點的影響，原因在於嘗試讀取單一 WebSocket 框架時，提供 WebSocket 端點的伺服器應用程式可能會被誘騙進入無限迴圈。

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼。

遠端 Redhat Enterprise Linux 8 主機上安裝的套件受到 RHSA-2021: 3148 公告中提及的多個弱點影響。

  - dotnet：ASP.NET Core WebSocket 框架處理 DoS (CVE-2021-26423)

  - dotnet：建立的傾印檔案任何人皆可讀取 (CVE-2021-34485)

  - dotnet：ASP.NET Core JWT token 記錄 (CVE-2021-34532)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 macOS 或 Mac OS X 主機上安裝的 Microsoft Visual Studio 2019 執行階段缺少安全性更新。因此，該主機會受到多個弱點影響，包括：

  - Microsoft Visual Studio 2019 中存在一個拒絕服務 (DoS) 弱點。未經驗證的遠端攻擊者可惡意利用此問題，造成應用程式停止回應。(CVE-2021-26423)

  - Microsoft Visual Studio 2019 中存在一個資訊洩漏弱點。經驗證的本機攻擊者可惡意利用此弱點，洩漏可能敏感的資訊。(CVE-2021-34532)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本

遠端 Oracle Linux 8 主機中安裝的套件受到 ELSA-2021-3142 公告中提及的多個弱點影響。

  - .NET Core 和 Visual Studio 的資訊洩漏弱點 (CVE-2021-34485)

  - ASP.NET Core 和 Visual Studio 的資訊洩漏弱點 (CVE-2021-34532)

  - .NET Core 和 Visual Studio 的拒絕服務弱點 (CVE-2021-26423)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼。

遠端 CentOS Linux 8 主機上安裝的套件受到 CESA-2021: 3142 公告中提及的多個弱點影響。

  - dotnet：ASP.NET Core WebSocket 框架處理 DoS (CVE-2021-26423)

  - dotnet：建立任何人皆可讀取的轉儲存檔案 (CVE-2021-34485)

  - dotnet：ASP.NET Core JWT token 記錄 (CVE-2021-34532)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼。

遠端 Redhat Enterprise Linux 7 主機上安裝的套件受到 RHSA-2021: 3143 公告中提及的多個弱點影響。

  - dotnet：ASP.NET Core WebSocket 框架處理 DoS (CVE-2021-26423)

  - dotnet：建立的傾印檔案任何人皆可讀取 (CVE-2021-34485)

  - dotnet：ASP.NET Core JWT token 記錄 (CVE-2021-34532)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

ID	Name	Product	Family	Published	Updated	Severity
152482	Security Update for Visual Studio 2019 (August 2021) (macOS)	Nessus	MacOS X Local Security Checks	8/11/2021	9/16/2021	medium
236416	Alibaba Cloud Linux 3 : 0062: .NET Core 3.1 (ALINUX3-SA-2021:0062)	Nessus	Alibaba Cloud Linux Local Security Checks	5/14/2025	5/14/2025	medium
152604	RHEL 8 : .NET 5.0 (RHSA-2021:3148)	Nessus	Red Hat Local Security Checks	8/16/2021	11/7/2024	medium
152549	Oracle Linux 8 : .NET / Core / 3.1 (ELSA-2021-3142)	Nessus	Oracle Linux Local Security Checks	8/13/2021	10/22/2024	medium
152591	CentOS 8 : .NET Core 3.1 (CESA-2021:3142)	Nessus	CentOS Local Security Checks	8/16/2021	8/19/2021	medium
152605	RHEL 7 : .NET Core 3.1 on RHEL 7 (RHSA-2021:3143)	Nessus	Red Hat Local Security Checks	8/16/2021	11/7/2024	medium
152488	.NET Core 的安全性更新 (2021 年 8 月)	Nessus	Windows	8/11/2021	8/20/2021	high
152604	RHEL 8：.NET 5.0 (RHSA-2021: 3148)	Nessus	Red Hat Local Security Checks	8/16/2021	11/7/2024	medium
152482	Visual Studio 2019 的安全性更新 (2021 年 8 月) (macOS)	Nessus	MacOS X Local Security Checks	8/11/2021	9/16/2021	medium
152549	Oracle Linux 8：.NET/Core/3.1 (ELSA-2021-3142)	Nessus	Oracle Linux Local Security Checks	8/13/2021	10/22/2024	medium
152591	CentOS 8：.NET Core 3.1 (CESA-2021: 3142)	Nessus	CentOS Local Security Checks	8/16/2021	8/19/2021	medium
152605	RHEL 7：RHEL 7 上的 .NET Core 3.1 (RHSA-2021: 3143)	Nessus	Red Hat Local Security Checks	8/16/2021	11/7/2024	medium

Detections

Analytics

Plugins Search

medium

medium

medium

medium

medium

medium

high

medium

medium

medium

medium

medium